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FINAL FBI APPROVAL / DETERMINATIONS/ COND ITIONS^ 


PXA is required by the E-Government Act. 

PLA is to be completed as a matter of FBI/DO J discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? — Yes.-No (indicate reason): 

x PIA is not required for the following reason(s): 

System does not collect, maintain, or disseminate PIT. .. . 

System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks), 
3. In formation in the system relates to internal government operations. 

2 System has been previously assessed under an evaluation similar to a PIA, 

No significant privacy issues (or privacy issues are unchanged). _ _. 

~x Other (describe): This application ! I Purpose of- 1 -1, 

- -— - thus, there is no privacy nsk |_| 


T 


Applicable SORN(s): N/A 

Notify FBI RMD/RIDS per MIOG 190.2.3? _No _Yes-See sample EC on PCLU intranet website here: 

http:/./home/DG/OGC/L'rB/.PCLIj/PrivacyCivil%20Liberties%20Librar>'/fonn_for_nitogl90-2-3_ec.w'pd 


SORN/SORN revision(s) required? 


_Yes(indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? _No ... „Yes (indicate forms affected): 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 
as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary.update s^ 


_Unit Chief 

Privacy and Civil Liberties Unit 


James J. Random Deputy General Counsel 
FBI Privacy and Civil Liberties Officer 


Signature: 
Date Signedl 




Signature: 
Date Signed: 
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L INFORMATION ABOUT TOE SYSTEM / PROJECT 

1. provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
system/project, Including interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it will be used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to ail users. 

_ I kunnorts the management of 

i 1 b7E 


J S he application al lows a user a 


Information is manually entered into the | [ Application via 

predefined data entry screens. Users may view the information using predefined queries 
and reports. 

Users of the application a re FBI H eadquarters and Field personnel with a need to 
| Access to | __ I 

limited to selected pers onnel 




>theQ 


j Application is approved bv[[ 


TbeC 


Application is part of the Investigative Mainframe b7E 


Applications that run on the FBINET closed network. FBINET can only be accessed by 
authorized persons. 

2. Does the system/project collect, maintain, or disseminate any information about 
individuals (i.e„ a human being or natural person, regardless of nationality)? 


YES [If yes, please continue.! 
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3 Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Check all that apply.) 

___ The information directly identifies specific individuals. 

__ The information is intended to be used, in conjunction with other data elements, 
to indirectly identify specific individuals. 

___ The information can be used to distinguish or trace an individual’s identity (i.e., it 
is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4, 

__ None of the above. If none of the above, describe why the information does not 
identify specific individuals either directly or indirectly. 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

_NQ _YES 

5 . Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

__NO. (If no, skip to question 7.[ 

__YES. [If yes, proceed to the next question.! 

6 . Does the system/project collect any information directly from the person who is the 
subject of the information? 

_NO [If no, proceed to question 7;] 

YES 

a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 

NO 
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_ YES p f yes, proceed to question 7.] 

b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

__ NO [The program will need to work with PCLU to develop/hnplement 
the necessary forro(s).] 

_ YES Identify any forms, paper or electronic, used to request such 
information from the information subject: 

7, Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only he used as identifiers in limited instances. 

__ NO _. YES if yes, check all that apply: 

_SSNs are necessary to estabiish/conftrm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 

__ SSNs are necessary to identify FBI personnel in this internal administrative 
system. 

_SSNs are important for other reasons. Describe: 

_The system-project provides special protection to SSNs (e.g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

_ it is not feasible for the system/project to provide special protection to 
SSNs. 

Explain: 

8 . Is the system operated by a contractor? 

_____ No. 

Yes. Information systems operated by contractors for the FBI may be 
considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in tire event the system 
collects, maintains or disseminates PII and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
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Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

___ NO If no, indicate reason; if C&A is pending, provide anticipated 
completion date: 

___ YES If yes, please indicate the following, if known: 

Provide date of last C&A certification/re-certifieation: 

Confidentiality;_Low_Moderate_^High _ Undefined 

integrity; _Low Moderate High Undefined 

Availability; __Low Moderate_High ^Undefined 

_Not applicable - this system is only paper-based. 

10. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 110* 
53 (codified at 42 USC 2000ee-3)? 

NO 

_YES If yes, please describe the data mining function; 

11 . Is this a national security system (as determined by the SecD)? 

_NO __ YES 

12. Status of System/ Project: 

This is a new system/ project in development. 

II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17, 2003? 

__ NO [If no, proceed to next question (H.3).] 
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YES If yes, indicate which of the following changes were involved (mark all 
changes that apply, and provide brief explanation for each marked change): 

A conversion from paper-based records to an electronic system. 

A change from information in a format that is anonymous or non- 
identiliable to a format that is identifiable to particular individuals. 

_A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

___ A change that results in information in identifiable form being 
merged, centralized, or matched with other databases. 

_ A new method of authenticating the use of and access to 
information in identifiable form by members of the public. 

A systematic incorporation of databases of information in 
identifiable form purchased or obtained from commercial or public sources. 

__ A new' interagency use or shared agency function that results in 
new' uses or exchanges of information in identifiable; form. 

A change that results in a new' use or disclosure of information in 
identifiable form. 

_ a change that results in new items of information in identifiable 
form being added into the system/project. 

__ Changes do not involve a change in the type of records maintained, 
the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

Other (Provide brief explanation]: 

3. Does a PI A for this system/project already exist? 

NO YES 

If yes: 

a. Provide date/titk of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? 
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NO 


YES 
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(OGC/PCLU (Rev. 04/01/2011) 


FBI PRIVACY THRESHOLD ANALYSIS (FTA) 

NAME OF SYSTEM / PROJECT: Child Exploitation Tracking System (GETS) 

BIKR FBI Unique Asset ID: 2011 > 0 06-01 . ...___ 


SYSTEM/ PROJECT PQC 
Name: Sa|_ 


Program Office: Innocent Images 
Division: Cyber (moving to CID as of 

October 1 s_ 

Phone: l I 

Room Number: FBI HQ, Linfhlcnm 2 


FBI OGC/ PCLU POC 
Name: AGCl I 

Phone: I 1 

Room Number: JEH, Rrrt 7350 


FBI DIVISION 'INTERM EDIATE-APPROVALS 


Program Division: CID 


FBTHQ Division: 
CID 


Program Manager (or other appropriate 
executive as Division determines)_ 


Signature: 
Date s ign: 
Name:l 


itive as Divisk 
iture: 1 
s igned] [~ 


Title: UnitChiefQ 




Signature: 
Date s igned; 
NameJ_ 


HR 




Title: Acting, Assistant Section Chief 


Division Privacy Officer 


Signaturij_ 
Date 
Name: 
Title: 


SignaturJ 
Date s igned: f Q, 
Name:Q 


Q>(CX 


Title: Supervisory Spec ial Agent 


After ad division approvals, forward signed hard copy pins electronic copy to FBI OGC PC Li (JEII 73510. 
vThe FBI Privacy and C ivil I iberties Officers determinations, conditions, and/or final approval will be recorded on the 
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FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: 


X PIA is required by the I:-Government .Act. 

_PIA is to be completed as a matter ofFBI/DQJ discretion. 

is PIA to be published m FBI GOV (after any RMD FOIA redactions}? _Yes, JC_No : Dee to iht 


PIA is not required for the following reason(s): 

System does not collect, maintain, or disseminate Pit 

_ System is grandfathered (in existence before 4/17/2003* no later changes posing significant privacy risks), 

_Information in the system relates to internal government operations. 

System has been previously assessed itnder an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

_Other 


Applicable SORN(s): JfUSTICE/FBl-002 (Central Records System) and DO1-Q02 (DPI Computer Systems Activity: 
and Access Records) _ 


Notify FBI RMD/R1DS per MIOG 190.2.3? _No J<.Yes-See sample EC on PCLU intranet website here: 

http://ho:me/DG/QGG/LTS/PCLU/PfivaeyGmi%^ 


SORN/SORN revislon(s) required? X N o 


_Yes (indicate 


Prepare 'rev i se/add Privacy Act (e)(3) statements for related forms? X N o 


RECORDS. The program should consult with -RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it cdhtaihs Privacy Aet requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary, RMD can provide advice on this 
as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary updates. 
Other: 


1 

Privacy and Civil 

Unit Chief (Acting) 

Jberties Unit 

Signature: 
Date Signed: 


ikzfizs 

Elizabeth Ross Witbneli Deputy General 

Signature: 

" I 7~~7ZZ\ 


Counsel (Acting) 

FBI Privacy and Civil Liberties Officer 

Date Signed: 

Wlpm* P'AaumJ 
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L .INFORMATION ABOUT THE SYSTEM /.PROJECT 

1 . provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
system/project, including interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it will be used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to a! users. 

The Child Exploitation Tracking Syste m (GETS) is a web-based application availab le 
from the FBI’s Innocent Images Office ! 1 

| ' | GETS will be used as a decontiiction 

tool by FBI personnel internally and between federal, state, local, and international law 
enforcement agencies* who are investigating child exploitation cases, GETS will provide 
approved authorized FBI u sers the ability to share investigative Intelligence and ima ges 
in child pornography cases -|~ ~1 


GETS will contain ! bnagesl loriginally obtained from various law 

enforcement entities ! I These Images h ave 

been seen in or identified through child exploitation cases. Not all imagej Jare 
considere d child pornography, however, most of them are considered child exploita tion 
material. I I 


Victims; The re will be no victim names or addresses maintained in the system, but there 
will be images! I 



| Nothing in GETS (Including any image| piers 

to 

the victim’s true namt| | 


Subjects: 1 |CETS, 

This would include the subject NarneJ I 





! CRTS wilt oniv he available to those state, local, or international law enforcement individuals!_1 

ICETSl 1 
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b7E 



2, Does the system/projeet collect, maintain, or disseminate any information about 
individuals (i ,e, , a human being or natural person, regardless of nationality}? 


_NO 

X 'YES |lf yes, please continued 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Check ail that apply.) 

X _ The information directly identifies specific individuals. 

X__ The information is intended ip be used, in conjunction with other data 

elements, to indirectly identify specific individuals. 

X_ The information can be used to distinguish or trace an individual's identity 

(i.e., it is linked or linkable io specific individuals). 

if you marked any of the above, proceed to Question 4. 

None of the above. If none of the above, describe why the information does not 
identify specific individuals either directly or indirectly 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

X NO ..YES 


epic.org 


EPIC-14-06-0WfefFt)t^^HlllM^h-Production 


EPIC-1767 




UNCLASSIFIED 


5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

__NO. [If no, skip to question 7.j 

_X __ YES. (If yes, proceed to the next question.] 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

_ X NO [If no, proceed to question 7,j However, GETS will | | b7E 

_YES 

a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 


_NO 

X YES [Ifyes, proceed to question 7.] 

b. Are subjects of mfbrmation from whom, the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on tire collection form or via a 
separate notice)? 

_NO [The program will need to work with PCLU to develop/implement 

the necessary form(s),] 

_YES Identify any forms, paper or electronic, used to request such 

information from the information subject: 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

X NO ___ _ YES If yes v check all that apply: 


SSNs are necessary to establish/confirm the identity of subjects, victims, 
witnesses or sources in this law' enforcement or intelligence activity. 

_SSNs are necessary' to identify FBI personnel in this internal administrative 

system. 
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___ SSNs are important for other reasons. Describe: 

_The systenvproject provides special protection to SSNs (e.g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

___ It is not feasible for the system/project to provide special protection to 
SSNs. Explain: 

8. Is the system operated by a contractor? 

X No. 

Yes, Information systems operated by contractors for the FBI may be 
considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PII and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI, 

9. l ias the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

X NO If no, indicate reason; if C& A is pending, provide anticipated 
completion date: Pending with ait anticipated completion date of 
2/13/2013; however. Security Division (SecD) has determined the 
below categories for CF.TS. On August 13,2012, SecD granted 
GETS an Authority to Test for ISO days, beginning on August 13, 
2012, 

Once this PTA is completed, the Innocent Images Office may 
begin testing in accordance with the ATT requirements, which 
include purging all of the data from the test environment at the end 
of the testing. 

YES If yes, please indicate the following, if known: 


Provide date of last C&A eertifieation/re-eertification: 

€oafidentiaIity:_Tow X Moderate_High ^Undefined 

Integrity’: _Low X Moderate_High_Undefined 

Availability: X Low _Moderate_High_Undefined 
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_Not applicable - this system is only paper-based. 

10. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 1 JO- 
53 (codified at 42 USC 2000ee-3)? 

X NO 

YES If yes. please describe the data mining function: 

11. Is this a national security system (as determined by the SecD)? 


X NO _YES 

12. S tatus of System/ Project: 

X T his is a new system/ project in development. 


II. EXISTING SYSTEMS / PROJECTS 

1. When was the sysiem/projeet developed? 

2. Idas the system/project undergone any significant changes since April 17,2003? 

NO [if no, proceed to next question (II .3).] 


YES If yes, indicate which of the following changes were involved (mark all 
changes that apply, and provide brief explanation for each marked .change); 

A conversion from paper-based records to an electronic system, 

__ A change from information in a format that is anonymous or Hen- 
identifiable to a format that is identifiable to particular individuals. 

__ A new use of an IT system/project, including application of a new 
technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiable form being 
merged, centralized* or matched with other databases. 

A new method of authenticating the use of and access to 
information in identifiable form by members of the public. 
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__ A systematic incorporation of databases of information in 
identifiable form purchased or obtained from commercial or public sources. 

__ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

A change that results in a ne w use or disclosure of information in 
identifiable form. 

.. A change that results in new items of information in identifiable 

form being added into the system/project. 

Changes do not involve a change in the type of records maintained, 
the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project 

_ Other [ Provide brief explanation] : 

3. Does a PI A for this system/project already exist? 

__NO_YES 


if yes: 


a. Provide date/title of the PL4: 

b. Has the system/project undergone any significant changes since the PIA? 

.NO _YES 
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UadassifiedXFOUO 

FBI PRIVACY THRESHOLD ANALYSIS I PI'A) 
{equivalent. to the DOJ Initial Privacy Assessment {.IPA )} 



S Y ST E AC PR OJ EC T FOC 

_t. 

FBI OGCYPCLIJ FOC 

Classified Bvx 

Noose: | | 

Name: 



Reason: 

Program Office: CIRO/CITU 

Phvne: 



Declassify On: 

Division: GIRO 

Room Number 


Fbossoj ] 




L , - Nimsbof u, i v s' v o 





Program 1 

ftvisKKF. Q.RG_ 

FBI HQ Division: CIR^ 

Program Manager 

StgnnnRe. 


-j-.. 

N S M 0 ! »■ ' C < 

for other aonroorutte 

J „ n V\> 

executive as Division 

' -r .i 

Name: Levels M. Chapman 

determines) 

Title; Iuk 

rmatkm 'Technology Specials A 

'Idle: Section Chkl 





Go. son Ps xoov * »B\c* 

V^UOtWC 


Signature 


IV' Mgli 

rd: C/ZC/YoTAY f 

Dote x;gned: 


Name I i 

Name: 


Title: OF 
Officer 

Q SSA'-CIXYTli vision Privacy 

Title: 


H\u IHI \mLi\ \i Dl UHMIWUON^ tOSlMHONs 


..Yc: 


SORN/SORN r 


PLA required..X No 

AppIioable SORN<a •, 

Notify FBI RMD/RIDS per MiOG 190.2 Y .No .S'es 

Consult with HMD to •demssyd evolve any Fed ex; 2 r*cosds.Y;ertron;c records 
FrepsueYeause/Add Privacy Act (e)i 3} statements for related terms? .No 


No Yes; 


Other: Hoe PTA involved hifraAruettire and theseiorc 


e .run recsim 


David C Larson. Deputy General Coasted 
FBI Privaev and Civil Uberdea Ofileer 


j Si pus to re: 

I Date Signed 1 


U nebs ssifuufF DUO 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF FASTEM / PROJECT: 


Upon Fred FBI approval FBI OGOTCLU wdi dAim‘u?e ss follows: 

I •• Signed original to file 190'HQ'CI32I ?04 (tVd k> JEH IB204 vnt PA-520) 

Copies irecipGnvs douse prmCreprsduee os needed for ikognms/Divssion OleGi) 

t - DO.I Otike of Privacy isrd Civil Liberties (via e-med to :>•-• v&c^dv ugdol.jo.yi 
(ifdassifkxl via band delivery s. o 1331 Pens. Av e, NW, Suite 940, 20530) 
- FBI OCIO ■ OIPP (.HxH 937$, mn\2 


i - FBI SecDoVU (deco'oive 
- RMD/RMAU Luov r - 


■topy: 


3 ■ P.r<:?g;:asi Di vs soon POC FPrivac 
; iRUlOfW. Pitv.c, 


2 


> VC 


; Officer 
Officer 


! OC< ' PH v OVt 0 r\ 

1 - PC LG UC 
1 ' FC ! A yF f l! ' v " b6 

I -• PC .'Ll.; I ivkier b7c 
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FBI PRIVACY THRESHOLD ANALYSIS (FTA) 
NAME OF SYSTEM / PROJECT: 



5. ' ^ . C " W ) ' V -W -O' >.* 1 < E 0* »'5W t>Uv» ' !>vU>i»' V 'OA'MI A ' \K N V * !' 

re.. is m formation linked to or linkable to sped tie Individuals (which is the definition of personally identifiable 
infornu.vdon (Pity;? 

/ NO. Stop. The FT A ts stow complete and after division approval(s) should he 

submitted to FBI OGOFCLU for final FBI approval. Unless yon are otherwise 
advised, no IT A is required. 

b7E 

\ 'P i ' i > s' t f 3fi| |br which we have a P1A awaking 

approval. " 

_ YES. If yes, please continue 

6. Access 

a. Describe the means of accessing she s vs feov project and transmitting i.otbrruakon to and iron; the 
sysicm.-proieeL 
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¥Bi PRIVACY THRESHOLD ANALYSIS (FTA) 

NAME OF SYSTEM / PROJECT: 

I I b7E 

b. Describe who within the FBI will hive access to the information in the system and the controls lor 
ensuring that only authorized persons can access the information: 

c. Describe who outside the FBI will have access to the information in the systenvproiect and the 
controls tor ensuring that only authorized persons can access the information; 

7. Docs the system/project pertain only to government employees, contractors, or consultants? 


.Y B$ i I yes. provide a brief exp] anation of the quantity and type of information: 

b. Is information about United States citizens or lawfully admitted permanent resident aliens retrieved from the 
system-project by name or ether persona! identifies"? 


NO .YES 


b. v ^ v i Y 'O'' Lit t r ' N. ^ 1 'I mt V P v 


_Y B$. This system supports law enforcement and-'or intelligence act-vines. Every deployment is 
unique and may collect dstferent types of information to support the current mission 
requirements. 

If yes, for system sowed acts other than those supporting law enforcement or intelligence 
activities: 

- What is the purpose lor the collection, maintenance or dissemination of SSNs? 

It '■'Cos : A '"hV S . i " ' s ,n\ ^ ^ f dn. v "}>’•' w 

not)? 
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FBI PRIVACY THRESHOLD ANALYSIS (FTA) 
Name OF SYSTEM / PROJECT; 


_| b7E 

' In light of Federal policy to reduce the use of SSNs, is iv feasible to rmmmfoe 
systenVprojeei-tiser access to SSNs in the sysfernforqfoct (why or why not)? 

10, Docs the system/proiea collect any information directly from the person who Is the subject of the 
information? 

NO 

_YES. 

if yes, tor systems/projects other than those relating to criminal. investigations. €?, m 
Cl: 

- indicate how such information is collected: 

- Identify by name and form number any forms used to request such information item 
the information subject tth-s includes paper or electronic forms): 

- Are information subjects from whom information is directly collected provided a wri 
Privacy Act (e)(3) statement (either on the collection form or via a separate notice}'? 

Yes No 

i I, bias the system undergone Certification & Accreditation (C&A> by the FBI Security Division (SecD>? 

NO. If no. please indicate reason; if C&A is pending, provide anticipated completion date: 

_Y ES . I f yes, p I e a s e: 

•• Provide date of last C&A ceitiikation/re>-cerfi'Iiea.tion.: 

Don't Know 

12. is this system/project the subject of an OMB-3(K> budget submission? 

..NO Don't know 


' { s I ^ t’ v, e 1 v m\ | N v - _ \ ' 'K N - „ ' P 

please provide OMB name: 

13 N t -s i Sw " V Ok A v. ' IK\v'^ 
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U nc hwslfled'T OU O 


FBI PRIVACY THRESHOLD ANALYSIS (FTA) 
NAME OF SYSTEM / PROJECT; 


b7E 


NO _YES Don? know 

14. v .m' >*■-U ' I s-v 

M' v „ - sk] ' <. Vx ' s Mop I be I* I \ j'' ’H ^ a Upku v5»?d ttri 

dmsiod approvaJ(s) should ho submitted to FBI OGC/PCOJ for final FBI approval and 
dete.rmkmi.ion If IMA or other actions are required .jj 

.This is an existing system/project. (Continue to Section II. I 


1L EXISTING SYSTEMS / PROJECTS 
I. When was the system/project developed? 


2. Has the systenYprojec? undergone any significant changes since April !?, 2003? 

NO. If tux proceed lo next question (11.3). 

_YES. If yes, indicate which of the following changes were involved (mark all boxes that 

apply): 

A conversion front paper-based records to an electronic system. 

A change from m form a lion in a format, that is anonymous or nonHdentiliable to a format 
that is identifiable to particular individuals. 

' IO t H x I ".Nx" |Yqtvi.t v i\ ~e i i V'' x -in x l ) 

1 o ''i i . d> t i i ■* - 1 x» iUvi i > w ” v. n aw 

would create a score open environment and/or avenue for exposure of data that 
previously did not exist.) 

A change that results m information in identif able form being merged, centralized, or 
matched with other databases. 
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End assihed\FGti O 


FBI PRIVACY THRESHOLD ANALYSIS (ETA) 
NAME OF SYSTEM / PROJECT: 


_I b7E 

A new method of authenticating the use of and access to information In identifiable form 
by members of the public. 

A systematic incorporation of databases of •nfbrrnsoon in identifiable form purchased or 
obtained from commercial or public sources, 

A new interagency use or shared agency function that res tilts in new uses or exchanges of 
inronnation in identifiable form. 

A change that results in a new use or disclosure of mformation m idem; haute iorm. 

A change that resents in new items of infonoaiion m identifiable form being added into the 
sys tony project. 

Changes do not involve a change In the type of records maintained, the individuals on 
whom records are maintained, or tire use or dissemination of information from the 
sysuwv project. 

.Other. jPlease provide brief explanation]: 

3. Does a PI A for this systeovproject already ewsC 

.NO 

YES If yes, please provide date/fille of the PlA: 

The FT A h mm complete and after division approvalfs) should be submitted to FBI OCXvPCLU for 
final FBI approv al and determination if Pl A and/or other actions are regnired . 
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FEDERAL BUREAU OF INVESTIGATION 
FOI/PA 

DELETED PAGE INFORMATION SHEET 
FOI/PA# 1272295-0 

Total Deleted Page(s) = 1 
Page 4 ~ b7E; 


XXXXXXXXXXXXXXXXXXXXXXXX 
X Deleted Page(s) X 
X No Duplication Fee X 
X For this Page X 
XXXXXXXXXXXXXXXXXXXXXXXX 
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For Official U se Only (POLO) 
~~ I DRAFT ONN9 b 




rivacy Act toYr s statement ;cwter on we code; 


NO. IThe program mil ami to work with PCLU to devdop/§mplcm«?R the 
a e c ess a ry fo rm (s ) • ] 


YES. Identify any forms, paper or electronic, used to request such 
information from the info natation subject: 


eras 


NO. If no. Indicate reason: If C&A is pend lug, provide asHicipated completion date: 
YES. If yes, provide date of last CEE A certifkation/re-eert i fkaikm: Tae | | 


boo • boovv 


X YES s'entire system). If yes, please 
provide the date and name or title of the 
QMS submission: 






system (as determined by the SecD): 




EXISTING SYSTEMS / PROJECTS 


■• a nemo change accompanying of 


- X --, Ka T H N ms 


____] The user accounts for system administranon and 

rmThej_| do not involve a change in the typo of records maintained by the 


|_|tde category oi Individuals on whom these records are mamtatne; 

~ , i „ 
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' \ OR OFFICIAL USbORLY 

final l-'BI APPROVAL. / & I::TLR A:N A ATI ONF / CONDITIONS; 







X PiA is asp -vpnrcd for tee tchea eg: reasonis): 


i by Aesa docs ay? collect, csaaruda, or disseminate IP l ! 

j Xysteso a grandfathered ■a; existence odAv 4/d RePOe; no huer changes pacing Cigna scant pr; vary rssas A ; 

i Xysten; hac been previonaiy ascesaed nnde? an evaluation cmabar to a PiA. j 

\ jT Other.' ' \ 

i : d id.: Pd A is prepared a- eottjunetion a Pis a change in the way the FBI A Ofhce of Vsetvn Aechaastee (OVA) :j 

ii elec locate ally ..yavs data pentad ting to vietbrss of child pornography. day data psevioasly stored ia sac I rack lag i 

i System's As ceres database it; non beam stored ;a art Gratae database. This change does ard create any sdshhoaa; j 

i a-:vayv issues The data re roams. aceessitae ;>ni be FBI petsisnnel with a specific need-do-koenv. meseatsv consicnne : 
bOOVA ernpecyeea. aunty a ah rosy nesaaseny FI' personae; supporting the Tracking System. Ia CP coots : b7E 

i investigated by she PBh local FBI Viytnt: Spec ad Am add rite same vnhrn tnhnmanon to dtc Department trfJosneedt ; 







\ RECORDS. d'he program should constat with RAID to rdeatdy ieroiee day Federal reeordCelectromc records Bastes, 
i ddtc system a toy comae; Federal records whether or not o' containa Privacy Act re-guests and, at any event: a records 
i schedule approved ay the Nanonai Archives nod Records Adnnn-.strntiou i.s necessary. RM.D can provuR advice art this 
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' O >' s \ , i * ? t 

L INFORMATION ABOUT THE SYSTEM / PROJECT 

L Provide a general description. of the system or project. that i«dml«S“ (a) name of 
the system/project, me Uni mg associated ncnmytmi (h) structure of the 
system/project, iasUitUng inim eonovctfeUN w b h other projects or systems; (e) 
purpose of the system/project; (d) nature of the bdormatlon 1st the system/project 
ami how it will he ased; (a) who will have access to the ioforroafioo ia the 
system/projeet; (f) and the m&mmr (dArmtsttussipn to all users. 

This VI A s 7 n \ ipaLy with the internal transfer stt? 

la ' %i A** « d > $P m ' i tgT t 'w t ' s i&jjp' M> ON 

O V S s s.> a ' n 

Pursuant to the Crime Victims' Rights Act of 2004 (IS U.S.C, § 3771) and the 
Chdd \ odans' Liefes Afi A AfOhh a v set n; m crnfe p mpgtiqAxy 

\ % , : v v . ' , ~N * ' V \ ' N ' v ' N x ' ' 

tor a federal CP ' n or prosecution. h <> v. > crime vouno base the d to 

submit a Victim impact Statement f V IS) in related legal or parole proceedings. 

^ vis _ v v , ' ' v v \ e A A > o' i ' 

\ to rp IX lit ' s » n v v Co t \ V ■' a N 

. <.n >t U t i v s - ! \> §|\\ o ! n <.e ST'* a v a < i 

Customs Bnlbreemem (ICE) and the National Center > Mi:: nag and Exploited Co fore n 

h ■' | % ' v ' ' , me 4 > t ' '.v x , 

! t jr«! ' cu> o h' tt' '' ^ an v eh step or. sc 

subsequently appear in an Infinite number of potential in vestiga tions. 

DO) consponem responsibilities for victim assistance pro grants in genera! and CP 
victims in particular are outlined m the Attorney General Guidelinesfor Ifimeis and 
< * < f » M n * M s' Op t \E ' o N 
GukkHm-x require the FBI, o hen it Is the lead investigating agency, to nob ly crime 
victims of their rights and offer victim assistance services. Oa/r/n/mes. section ILL 
Victims are wee so decline to receive further services or assistance. In such cases, however, 
the ut recommend properly docnmomlog the vicdm.N informed decimation of 

mandatory a and services. ' 

Y jm'u\ fo ? riser \n i &V -tjtws A \). },vd;' s he t V'- \ 
program. In order to facilitate victim assistance while avoiding trauma to victims 
iCNuh.ng nem wormed and yhv. ,umJ o-o, e K s as enforcement A b ».wereno l S 
Attorney 's Offices of additional incidents involving the images. OVA maintains a 
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FBI PI A- Child Pornography Victim Assistance TrsoKing System (CFVA.) 

S S ^ SS V _ X M \ SC ! >V S s s 

' vs, t V ' "* ' VMnOvtgAA < ii f O 

local LE mc* v . CFVA contains limited victim biographical data including name, 
s t c ao ' ' 'A )B co; act \m , ,\ a to Cg *0 
of a minor victim, PCX information for any LE agency that has previously conducted an 
investigation based on images of the. same victim and whether the victim has previously 
! d ," ,\ > , 01 f ' no .^arui one < >",» ' i t 

a VIS. If a particular victim has not previously waived, that right, he/sbe will continue to 

v ; V ' * V Cv , c si i ' > c ' \ » N 

m asm ' . ^uu\ o .\ . ,>t no k \i \ fo fo ' 

o- on c mo u oo i mv, > o m >w core US A t'iu III! fo r % .or 

o, i to loo 'J * it yp ernes ; b!foe. 

p v 0 "( h ' b , , i m ! i ts m i A ? 11 t P\ \ 1 1 ' 

begins when a LE agency recovers pornographsc images depicting CP victims anti_ 

submits the imaces to NCMEC lor Iderallkatlon of victims depicted. NCMECl I 


[ | \PM 1 i' .ts-mus ,5 Vvi'ON o^m, seen as '"B.p^spmf' to the nuou. ' and msuX s 

' contributing agency that no match reus found. If the conges match one or more 
5 . ,, io vs ntomcO m I? \ V Ml ( loti c o s crump > he 

series name/sl assigned to any group of images rn which the victim was depicted and also 
provides contact information for the POC of the Identified series/* 

% hi { i ^ .. s it Jt< xMH ' u v. 11 v o- 

\t 'Mot of c " t%c€A s s $ a , ;c a- h has occ oos M h prepares ,cm f '"'wanL 
' ' > cp v ‘ \ s >*, s t i itWiCA 

investigating federal agency/' The VIR includes victim identiikadon (name, DOB, 
address, tcL'pbvne number, and me mforonsfop of the legal guardian. If mry. to the mehny 
and whether the victim, has previously opted out. of notification and VIE subm-sanm 
s s , > s s ' s W VI p i 50 ! f 


• The v k.e tog, «!?<; s?V„ - - -fvn« Mb ' r- is 'UP U:< OVA hv -he > , < s U « L£ 

.yeney, in hr ', m n of the Cbikl 'is t uv Pc;, The Deparimesd of Jusdoe $fj s a 

' , \o s i' Ss , 'Aft," " t 1 ip "S ' ,o, , Os 

' ss <? v <, ,, \ os, and s, f , p.e, pawle': vn Where itre FBI Is 
, t ', *■ '-r \ s v\ s , , - 's ' ' v ' s s 

XCAEC provides OVA vddr the luums of -A; „' >, sh; v t , e , or possso snwss m s NCWhO 

O S \S S , „ , , sf-gn S , , , 

oi O' in svhsch a | ^|i , (cte, , s , 
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FBI PTA: Child Pornography Victim Assistance Tracking System (CPVA) 

a. Does the system/nrpiect rapport criminal. Cl, or FCI investigations or 
as.aesam.ertTs? 

_X_ NO 

LL agencies regarding the not iso coo VIS submission preferenees of a CP % miim tw a 
CP investigations, CPVA itself does not directly support an investigation; or assessment. 
CCS | IT yes, proceed u> question 7.} 

b. Are subjects of mforwafoei from whom -he information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 


.X V1 :> Identify any forms, paper or electronic, used to request such 

Infn.rmurmo from the information subject': 

The Notification Preference term used by foe FBI To collect mfonremon from CP 

7 - Arc Social Security Numbers (XSNs; coHected, maintained or disseminated Coin the 
system/prmeefo Foil SSNs should only be used as identifiers in limited instances. 

X NO YFS If yes, check all that apply: 

..SSNs are necessary to oshfohsh/oonbrm the identity of subjects, victims, 

.SSNs are important for other reasons. Describe: 

.....The svstenvproioci provides special protection to SSNs ie.g., SSNs arc 

encrypted, Hidden from ail users ua a look-up table, or only available to certain 
users). Describe: 

.D is no! feasible for the systern/projecr to provide special protection to 

SSNs. Explain: 

N Is the system operated by a contrac tor? 
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FBI PTA: Child Pornography Victim Assistance Tracking System (CPV'A) 

x.:m. 

Yes. information systems operated by atm mss tors E>r the 1 bBI may he 
considered Privacy Act systems of records, The Federal Acquisition Regulation 
e;a:!:ons standard contract clauses that must be included in the event the system 


coileeta, madmans or disseminates Pit and additional requirements may be 



X NO if «e» indicate reason; if €&A is pending, provide anticipated 


completion date: 



ConfkientiaHCy: Low M odontic _X_lligh Undeft n ed 


integrity: Low Moderate X High Undefined 

Avadaltdsty; Low Moderate X High Undefined 



X.... NO 

.YES If yes, please provide the date and name or 

title of the OMB subrnksioo: 

.implement; ng Rcccmones'daiious of the P i I Cormm 
X. NO 

YES If yes, please describe the data, mining fiuKhion: 






















//FOR OFFICIAL USE ONLY 



X NO iif fS proceed k next quest-on (II ' 


YES ' Xvk v s x oo v'a g, ' ox i&bk oNc murk ad 

boxes that apply ). 



A change Com r M© o' in a format \ is anonymous or non- 


kk-uh liable to a format that is identiiiable to particular individuals, 

A new use of an ~ systeenforojeep including application of a 
kohnofw,, mm. ehmumw 'rev- nob a rat . r, at sd.cntdbr" , foim to \k it _fo 
m s pio obt>%o toot ^ v. vw 0'\ ' x v < v ^ d «. 

avenue tor cxaorero of data that previously did not exist,) 

A change that results in information in identifiable form being 
r\ ace oeu - , c : akhed -> nr mhos duukewv 

x x x 'oi e n n k. spy v' > x > 

wlernation o foenfoah.e fosm H member- m the > i N 

A systematic incorporation of databases of information in 
x Pkfoe ft x _ O'.dmo ,i <l xO» 'kk to * xx-- 


A now interagency use or shared agency fonctiori that re: 
PS or exchanges of information in identifiable form. 
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i-i)!&QR OFFICIAL USE ONLY 
PTA: C o ' \\ . 1 ' ' \*** 3 v?r '«b } - A 

' \ ' 'V > v < x V 

the r s on whom records ore .mahn.aioed, or the use or 

o ' -e'' a d«t j ' T&fM hr N' Y'-C! v .'r p;Oks - 

Other jProvide to let evphunHkm); 



X.NO .YES 


Provide dofe/tltk of the PI 4; 
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FBI PRIVACY THRESHOLD ANALYSIS (FTA) 


\ *M1 Of SYSTEM FROJ1 ( i : 


b6 

b7C 


FBI im isiox IM rMMf BiU'i: \PPftO\ \I > ^ ay ^ ^ ^s ;n » - a tk. ; s~ >*> ooaoy 



,\sV?i'» Mv'\ go t.O' 
evee-nte d- Hors son d 

i s 

fedinad 

s 

O' t .0". Ho is O' 

idum-mb Seated 

Bra mb 

SiSTiftftiR I 


Signature; 1 _1 

U*M*s*$isu ddd/.,.2d// 1_1 

Name; 

IPs , 

Hate -- 

Name; | | 

r^rirm**¥4&*** ^ 

t Bit 10 Odde 

Sit. 'oOiiH' 


Signature: 

Cooo :r:-cibgcnei:- 

Date sigaed: 


Date signed; 

Division 

\ame 


Fame 


Ink. 


Title: 


HfKK 1'BI 1 siqtK' \m:t IB: 201(M 


BeHved I ram: 
CIlAliLillfS 1 

I'Hd&ssFy'' 


8YSTFM/PROJECT POC 
Xm* | — 

Program Orlke; 

.D; vid eo: CD 

^ sk n~ i 


FBI OR C/FCLl? FOC 


Room 'Number; 73501EH 


Aide dl dBAo* aK ffJi^Oid dpmd dad uyo g^^l-edroaO uf^ to FBI OdC/PCLI" dl r !3 " 

OH- jjglgpfjv^ tmb Cad OffkcA «^^TrBrmdon' ! ; > cordk-^s., and/er tdd tmorovd wd be -^dded oe ,d: 
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FINAL FBI APPROVAL / REITRMIN A'nONk / CONDITIONS: FINN ssslfcll Alll Os eysapkrreB ky Iks FBI 
FCIAFFCLO Fdkswhig. FT .4 sAksksaksm. Tke ETA drafter slto-skl sklf Is Ik s sssl pays i a kI seMk rsa/;. 


PiA F; icqsssd by she FAVovennyss-m .Acs 


System rises net eeikx.; manm-ess <n disseminate PH. 

System is aran-Pe-hes'ch Ls existsaes helore 4/17/200 F so Diet ehasyte; posing significant. privacy risks'). 
kslAneanon in ins system re lutes Is msecs >d government operas loss. 

System Sms keen previously assessed mKkr an evahnnmn snmts.r?o a PiA. 

Mo slgaihksms privacy Issnes tor privacy issues ass tmehsrsgees;. 




Notify FBI ASID/RiDS per MIOD 190.2.0? No ... Yes-Ace sample PC cm PGUP inkanet website hers: 
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L Provide a pesK-ro! description of she system or project Shat includes; (it) 
the 'Weot project. ssssJohuso ossoehud ;te*vn> tH-*: ths m'tvnssx ol the 

Nwtsfo osehoho'.; o 5 5v>«ttb ollut pioseets os *\sn*ttv f 

psu-poM' os'the Ns--.fi. os proivcf oP oos$tt\ of the mkoooosloif hf She v* stent r 
off;l hoo h Hill, he asid; if t oho ohl hose aeoess iss she mfhsm&ihos bs rise 









\ The information b Amended m be used, ' coninnaion with other dam elements, 

:< indirectly identify spedtic individeals. 

X The information. can he used to diMirtgubh or trace an irmividiml'a identity (• e., it 
: nOs e - m o s' \ fednab 

If ym nbtrked my of the above, proceed to Qixtstmn 4, 

Norm of dm above, !i mono of the above, describe wby the information does not 
identity specific indie kiuab either directly or indirectly. Ilf yeo cheeked thb item, 
s I n „n » \ ^ sn «-mfed o 

4, ^ ,v 

consultants 7 

>1 HO .YES 


5. b mlbonation about United Stems oilmens or hovdtdy a dot I tied permanent resident 
o t- retrieved bom dm systenvpro|eet by name or other persona! identifier? 

NO, flf no, skip to question 7,] 

X YES. (if yes, proceed to the mxt question, | 

6. Does the sysmrrdpnpeet eoiieet any information directly from tire person o ho is the 
subject of dm information? 

X.„ NT) [|.f bo, preened to qucstmu ?,| 
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h Arc ' < of huomnabeu Com o h j ! ! the ietbrmeimn > directly collected 
provided a written Privacy Act (e}(3) -statement (either on the collection form or vis a 

\i * IThc program w id seed, to vtorh. vAth PC LC to develop implerm 
the ureessnry fensp),] 

't P'N identity am forins, paper or eleernmde, mti\ to jeepued such 
information from the Information subject; 



.Yes. hiomrapon s t." - or-er.Uv.il b> ^?ju -doss to- the i h may he 

s s Ox. v vac; \„ s ^ke k%1 s It, ~d, , Co <v» - Re 
^.otram- sunviud n^t. et clauses that must v nebrbe in the evem die s\ Mete 
eolleun "»"?t ? ns Josem notes PI! and e-dJ'i 'naf re^ virement'- may he 
' W* as ■ n y, -n l -vpecev.n ot is „ p-d-ex ( enantevUmns one the 
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*kito^ v ( v e, nn be requitedo's wmaYo is nponuine me 

system for ihe FBI. 

O' v undmgo < o t <. do ! X. e^mm \m ! '\v,\! * \ too Bf 

Vecimm, Division tSecBD 

X. NO If no, indicate reason; if€-4k-Ah pending provide anticipated 
completion d;ne Yssc meed ! i e m Jen TO , 

YFS If yes, please mbkmte tin.' follow log, if known; 

Provide date of last U<&A i'crtklsakoo/rc'-cortifk'okoo: 

i'oskkleetmhB;_Lw_Moderate_High.Undefined 

integrity ’ .Low- Moderate High Undefined 

UikiabHm: _I s‘« Moderate High Undefined 

\ 0 , , o’kWi 'dm''' oem is only popor-hosed. 


11, N v" s .Vv-sr.em/project the subject of an OMB-300 budget subokssinn? 

_ •< NO 

V'S it ><?, picose pom»<U the date ami name or 
title of the OMS submission: 

U. Does the system conduct h mm mg as defined in Section S 1 ' I of the 

' v v, m <■ i < f o t to s U „ * d hf 

' , 14'U' \ Y v oc '! 

X NO 

..YUS If yes, please describe the data mining foneiiou: 

12, Is -' b o| >o v\ , msum v <s determined by the Sr..DU 

.X NFS 

13, Smt' of w o p-otou 

.-X i his n o new system/ project t < development. Ilf voo cheeked fibs block, 

XTOF, The VI s is mm complete end after division npprosotfsl shoo hi be 
submitted to FBI 0€€/P€LI. for heel FBI approval etsd delerohoethm If 
fl\ idk otherdolkms ore:%4oov<h' 
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